Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File:                     tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier:          Q5E26NaFVUWgGZHVV/vb+cKSHmZFXICtqlC5EJBNyis=
Subject key identifier:   A4:91:D2:FE:25:DD:32:54:65:C0:C2:27:1C:67:0E:E6:00:44:70:29
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer:       /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial:       01962E99896C03498A8626EDC1D76B6361A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
                          2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: OlsAA8emHIslMZSSRIYqWrsXJWas1+EJTdUlPMfVoDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:6c:03:49:8a:86:26:ed:c1:d7:6b:63:61:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=a491d2fe25dd325465c0c2271c670ee600447029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:ca:ef:93:62:31:81:dd:7f:d3:4c:69:75:
                    3d:fd:8f:6d:6a:ab:20:39:a4:c3:4d:8c:9a:ae:f2:
                    11:90:fc:f3:57:56:4f:8e:4b:28:10:60:4c:55:f5:
                    18:49:d8:00:45:90:bb:e7:30:cd:93:09:75:e0:ea:
                    13:24:43:dd:2f:64:a8:15:06:73:cf:74:af:71:b2:
                    27:a5:20:7b:3f:2f:3f:7c:c0:7b:2b:d4:62:53:58:
                    39:50:7d:98:aa:49:b6:a3:bd:41:4f:06:f2:87:90:
                    e7:da:ba:44:62:10:b3:68:5f:96:f3:d3:65:72:27:
                    fe:47:ca:9b:86:b8:75:9e:ae:1c:4a:81:d8:ee:a9:
                    98:82:09:7a:3e:26:94:f3:43:6e:28:02:39:89:25:
                    bc:e5:f4:8c:ff:10:06:6b:e6:72:c5:bf:f5:8d:fa:
                    c6:65:a3:87:15:54:62:47:fa:06:42:53:a9:8f:71:
                    e6:1c:52:d8:23:f8:43:2e:48:4a:6a:c0:a6:38:77:
                    3a:db:d1:ce:03:97:9a:61:77:ba:0a:52:05:d1:ec:
                    3c:bf:25:d5:6e:ae:5d:75:31:40:7d:5a:01:16:b2:
                    87:87:4d:ee:a1:83:88:04:bf:b5:a4:7a:23:14:69:
                    70:02:1f:9b:af:df:a9:2d:34:70:b0:3a:ff:12:6f:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:D2:FE:25:DD:32:54:65:C0:C2:27:1C:67:0E:E6:00:44:70:29
            X509v3 Authority Key Identifier:
                keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:b0:6a:5d:3f:a8:ad:42:a7:5f:cd:ee:ce:97:4c:57:dd:
         39:be:c7:30:dd:86:78:b4:57:83:84:40:c8:21:b4:f2:46:76:
         68:11:3e:bb:1f:4d:c6:20:27:e2:69:e7:ac:4e:a9:55:75:c4:
         c1:14:92:82:bd:d1:01:96:4d:b3:e0:0b:91:42:2b:96:5e:b6:
         68:b5:76:37:8d:65:79:a6:22:28:d6:50:c1:dc:20:20:6d:bd:
         14:6f:ac:70:56:6c:cc:9a:29:48:fd:17:15:fa:09:e5:0b:00:
         52:6e:3b:9d:ef:1e:a6:c8:f8:b0:57:39:1c:8e:dc:35:b4:da:
         79:4a:65:82:c6:d0:73:26:a4:13:5a:3c:0d:b2:85:2a:ca:f2:
         7c:60:50:20:12:70:ed:9a:6a:ad:0e:d0:d7:3d:e8:3f:e5:1c:
         d7:32:33:68:a8:a8:9b:d5:1a:bb:b7:da:17:7e:90:6f:a2:28:
         fa:ab:58:43:96:df:ac:01:09:3a:6e:ff:6a:5f:9e:d6:73:d7:
         1b:13:c0:ad:ed:32:c0:b7:dc:20:0f:ff:6d:8c:93:ac:8d:fe:
         41:ba:fa:ac:87:41:ee:09:30:6a:cf:b9:c4:f9:b6:77:2d:e6:
         d5:f8:a9:7c:71:92:55:2b:0e:82:22:ce:49:74:a8:e8:c2:11:
         c4:29:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----